#184 closed defect (fixed)
Buffer problem in CheckEventLog?
|Reported by:||mf@…||Owned by:||mickem|
Description (last modified by mickem)
I'm currently testing the EventLog? checker on a Win2k3 x64 box. I have some problems with my applications log.
I've tested a bit, also with debugging enabled, but I can't see any problem except of the module stopping before the end of the log, so I can only get logs which are older than 4 days at the moment.
A few facts on the logs:
applog: 960 KB - 583 lines
systemlog: 512 KB - 1764 lines
Any check with system log works fine, but applog does not work for the recent messages.
My check for testing with applog:
/usr/lib/nagios/plugins/check_nrpe -H X.X.X.X -c CheckEventLog -a \ filter=new file=application \ filter-written=\>4d \ filter-eventSource=Print \ filter-eventSource=TermServDevices \ filter-eventType==info \ MaxWarn=1 MaxCrit=1 syntax="%source%(%type%) %written%" filter=out filter=all
These are the last lines from the output of nsclient in -test mode (debug enabled for eventlog):
d \CheckEventLog.cpp(535) Matched: + time-generated: for: VMware Server(info) Monday, June 02, 2008 21:11:28 d \CheckEventLog.cpp(535) Matched: + time-generated: for: VMware Server(warning) Monday, June 02, 2008 21:16:38 d \CheckEventLog.cpp(535) Matched: + time-generated: for: VMware Server(info) Monday, June 02, 2008 21:16:38 d \CheckEventLog.cpp(535) Matched: + time-generated: for: Application Error(error) Monday, June 02, 2008 21:16:45 d \CheckEventLog.cpp(607) Result: Eventlog check ok d \NSClient++.cpp(536) Injected Result: OK 'Eventlog check ok' d \NSClient++.cpp(537) Injected Performance Result: '''=0;1;1; '
I looked over the code, but I'm not really a CPP coder. Maybe it is a buffer problem?
My version is: NSClient++ Version: 0.3.2.10 2008-05-17, Plattform: x64
Thanks for your help and your work on the project.
Change History (3)
comment:1 Changed 5 years ago by mickem
- Milestone changed from 0.3.2 to 0.4.0
- Owner changed from MickeM to mickem
- Status changed from new to assigned